DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1606 commits 4 branches 217 tags 166 MiB
Commit graph

552 commits

Author SHA1 Message Date
Manuel de Brito Fontes
ff7d72191e Update echoheaders images 2017-08-06 19:22:22 -04:00
Manuel de Brito Fontes
a091d3ede7 Remove lua and use fastcgi to render errors 2017-08-05 16:29:58 -04:00
Manuel Alejandro de Brito Fontes
6403efe0d4 Merge pull request #1058 from sethpollack/rpm 
add per minute rate limiting
 2017-08-03 20:44:49 -04:00
Manuel de Brito Fontes
e6f7fefca8 Export TEMP_DIR variable in Makefile 2017-08-03 11:10:30 -04:00
Seth Pollack
40a9a54082
add per minute rate limiting 2017-08-01 23:24:48 -04:00
Craig Gurnik
c9ce0dd3cc Fix link to UDP example 2017-08-01 15:29:27 -04:00
Pieter Lange
fa5c2a1f72 Allow TEMP_DIR to be set externally 2017-08-01 16:14:42 +02:00
Manuel de Brito Fontes
fe1b913f21 Add function to allow custom values in Ingress status 2017-07-28 20:26:35 -04:00
Manuel Alejandro de Brito Fontes
a56dd7cc38 Merge pull request #1013 from caiyixiang/unify_forms 
The fields of vtsDate are unified in the form of plural
 2017-07-26 22:39:08 -04:00
Nick Sardo
16a213c076 Merge pull request #994 from freehan/revendor-godep 
Revendor godep
 2017-07-26 17:32:18 -07:00
Seth Pollack
bceaa04f3b add docs for proxy-set-headers and add-headers 2017-07-26 08:32:18 -04:00
caiyixiang
2b72441bc5 The fields of vtsDate are unified in the form of plural 2017-07-25 14:21:12 +08:00
Frode Egeland
e70678a5b6 Update configuration.md 
Remove duplicate line
 2017-07-24 17:01:19 +10:00
Manuel de Brito Fontes
294ecb4986 Update nginx controller 2017-07-20 10:41:50 -07:00
Manuel Alejandro de Brito Fontes
fbb96f4c83 Merge pull request #981 from chrismoos/service_upstream 
Add annotation to allow use of service ClusterIP for NGINX upstream.
 2017-07-19 12:20:30 -04:00
Chris Moos
666bcca495 Add annotation to allow use of service ClusterIP for NGINX upstream. 2017-07-19 16:02:04 +02:00
John Belamaric
ba7e8f1514 Fix the sed command to work on macOS 2017-07-18 16:41:07 -04:00
Manuel de Brito Fontes
0d4bf15cb0 Add nginx basic auth example 2017-07-16 16:22:08 -04:00
Manuel de Brito Fontes
f4fe72a247 Release nginx 0.9.0-beta.11 2017-07-15 13:56:38 -04:00
Manuel Alejandro de Brito Fontes
8f38c4acff Merge pull request #960 from aledbf/update-controller-ngx 
Update nginx in ingress controller
 2017-07-14 18:16:10 -04:00
Bastian Hofmann
38d198bfde Make proxy_headers_hash_bucket_size and proxy_headers_hash_max_size configurable in the nginx controller 
See https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_headers_hash_bucket_size and https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_headers_hash_max_size
 2017-07-13 13:57:03 +02:00
Manuel de Brito Fontes
df2bf96b3f Update nginx in ingress controller 2017-07-12 20:12:41 -04:00
n1koo
02832dec6c Add support for add_headers 2017-07-10 09:55:07 +03:00
Georgiy Kutsurua
d56e261835 Sets parameters for a shared memory zone that will keep states for various keys. 2017-07-07 15:45:13 +04:00
Manuel de Brito Fontes
835aea4bab Fix lint code errors 2017-07-06 16:17:46 -04:00
Remington Reackhof
1b3f0acde1 add configmap and template changes for comma separated proxy-real-ip-cidr list 2017-07-06 10:54:36 -05:00
Manuel de Brito Fontes
5d5e0df4b0 Lint code 2017-07-03 22:10:48 -04:00
Manuel de Brito Fontes
6a4679b028 Add support for proxy protocol in TCP services 2017-07-02 17:09:09 -04:00
Manuel de Brito Fontes
4493d9d602 Add release task in Makefiles and avoid multiple builds 2017-06-30 16:19:41 -04:00
Manuel de Brito Fontes
9dec76acda Fix nginx ingress controller release 0.9-beta.9 2017-06-30 10:20:10 -04:00
Manuel de Brito Fontes
b8d571628a Fix docker-push task to publish arm and ppc64le 2017-06-30 00:26:18 -04:00
Manuel de Brito Fontes
796aa945f0 Release nginx ingress controller 0.9-beta.9 2017-06-29 20:00:08 -04:00
Manuel de Brito Fontes
844ea6a864 Add arm and ppc64le support 2017-06-28 20:22:59 -04:00
Manuel Alejandro de Brito Fontes
3c9ac43058 Merge pull request #919 from Collaborne/pr/redirect-per-location 
Apply the 'ssl-redirect' annotation per-location
 2017-06-28 13:43:44 -04:00
Andreas Kohn
04346a8ec2
Apply the 'ssl-redirect' redirect per-location 
This is needed to avoid ingress definitions with different settings for SSL
redirection conflicting with each other.

NB: This was discussed in the review of #427, but ultimately not addressed.
 2017-06-28 11:18:06 +02:00
Manuel Alejandro de Brito Fontes
005ed5243f Merge pull request #907 from glerchundi/master 
nginx/proxy: allow specifying next upstream behaviour
 2017-06-27 19:24:16 -04:00
Gorka Lerchundi Osa
5503e8d0e9 nginx/proxy: allow specifying next upstream behaviour 2017-06-27 23:30:43 +02:00
Manuel de Brito Fontes
5f02858623 Improve X-Forwarded-Host support 2017-06-27 10:08:14 -04:00
Étienne Lafarge
408f32ee9d [doc][nginx] Update NGinX status port to 18080 
The docs still states to reach the /nginx_status page on port 8080.
However, it seems that this has been changed :)
 2017-06-25 10:41:38 +02:00
Manuel Alejandro de Brito Fontes
312c9ec7e2 Merge pull request #871 from aledbf/fix-sticky 
Add feature to allow sticky sessions per location
 2017-06-23 13:22:12 -04:00
Manuel de Brito Fontes
b28485cf31 Fix nginx error check 2017-06-23 09:55:45 -04:00
Manuel de Brito Fontes
83d03a19a6 Add feature to allow sticky sessions per location 2017-06-22 14:12:57 -04:00
Manuel de Brito Fontes
6e2203594e Add upstream keepalive connections cache 2017-06-21 23:52:06 -04:00
Manuel de Brito Fontes
85e6d30844 Improve variable configuration for source IP address 2017-06-21 00:52:12 -04:00
Manuel de Brito Fontes
df6795c0af Update nginx-slim to 0.19 2017-06-20 22:23:24 -04:00
Manuel de Brito Fontes
4bdf47f96f Add information about nginx controller flags 2017-06-16 16:15:00 -04:00
Manuel de Brito Fontes
92e3b5ba78 Lint nginx code 2017-06-14 23:05:04 -04:00
Manuel de Brito Fontes
4d4ece1d89 Release nginx ingress controller 0.9-beta.8 2017-06-13 22:22:21 -04:00
Giancarlo Rubio
59f08d0b87 Document log-format-stream and log-format-upstream 2017-06-13 16:22:22 +02:00
Manuel de Brito Fontes
51b2e0f2cb Fix IPv6 UDP stream section 2017-06-13 08:45:30 -04:00
Giancarlo Rubio
fffddebdf8 add semicolon 2017-06-13 13:05:43 +02:00
Manuel Alejandro de Brito Fontes
cdbf2aad37 Merge pull request #824 from aledbf/update-nginx-controller 
Update nginx-slim to 0.18
 2017-06-12 18:39:15 -04:00
Manuel de Brito Fontes
d5d958a332 Avoid setting maximum number of open file descriptors lower than 1024 2017-06-12 16:20:40 -04:00
Manuel de Brito Fontes
748f686eca Update nginx interface 2017-06-11 15:56:40 -04:00
Cory Klein
fa70e5e905 Make log format json escaping configurable 
This will allow json logging in nginx ingress controllers which greatly
improves ease of log indexing and searching via elasticsearch.

After this change is made, users could set the following property in the
ingress configmap to enable json logging:

log-format-upstream: '{"proxy_protocol_addr": "$proxy_protocol_addr", "proxy_add_x_forwarded_for": "$proxy_add_x_forwarded_for", "remote_user": "$remote_user", "time_iso8601": "$time_iso8601", "request": "$request", "status": "$status", "body_bytes_sent": "$body_bytes_sent", "http_referer": "$http_referer", "http_user_agent": "$http_user_agent", "request_length": "$request_length", "request_time": "$request_time", "proxy_upstream_name": "$proxy_upstream_name", "upstream_addr": "$upstream_addr", "upstream_response_length": "$upstream_response_length", "upstream_response_time": "$upstream_response_time", "upstream_status": "$upstream_status"}'
 2017-06-09 15:32:11 -06:00
Manuel Alejandro de Brito Fontes
dbb12afbb9 Merge pull request #829 from rlguarino/ross/2017-06-08T18-48-35-07-00 
feat(template): wrap IPv6 addresses in []
 2017-06-09 13:21:30 -04:00
Ross Guarino
54f6729dc8 feat(template): wrap IPv6 addresses in [] 
Add formatIP helper function which will wrap IPv6 addresses
in [] and print IPv4 addresses as is.

Closes #828
 2017-06-08 20:11:00 -07:00
Manuel de Brito Fontes
a4793eda8c Update nginx-slim to 0.18 2017-06-07 11:33:13 -04:00
Nick Sardo
8cd9a5a98a Merge pull request #786 from aledbf/update-echoheaders 
Update echoserver image version in examples
 2017-06-06 16:38:48 -07:00
Olve Sæther Hansen
d4600a87b5 Added client_max_body_size to authPath location 
Seems like nginx denies the request because it would be over the max body size,
event if `proxy_pass_request_body` is `off`.

This fixes 811
 2017-06-02 22:40:29 +02:00
Manuel Alejandro de Brito Fontes
66b4c2606b Merge pull request #809 from aledbf/fix-variables-map 
Fix dynamic variable name
 2017-06-02 11:59:32 -04:00
Manuel de Brito Fontes
b70e9ca078 Fix dynamic variable name 2017-06-02 11:12:02 -04:00
Arjan Schaaf
a854dc71b2 #789 removing duplicate X-Real-IP header introduced 4bd4bf3be6 2017-05-29 11:43:05 +02:00
Manuel Alejandro de Brito Fontes
32f24380ec Merge pull request #787 from aledbf/pass-server-header 
Add setting to allow returning the Server header from the backend
 2017-05-28 19:16:58 -04:00
Manuel de Brito Fontes
2f20c6bfcb Add setting to allow returning the Server header from the backend 2017-05-28 17:40:25 -04:00
Manuel de Brito Fontes
b84fc350ee Update echoserver image version in examples 2017-05-28 17:19:34 -04:00
Manuel de Brito Fontes
8837cf93e2 Allow customization of variables hash tables 2017-05-28 16:05:49 -04:00
Manuel Alejandro de Brito Fontes
f00823fd83 Merge pull request #783 from unixwitch/nginx-app-root 
nginx/README.md: clarify app-root and fix example hyperlink
 2017-05-28 15:43:51 -04:00
Liss Tarnell
6d3e9666ba nginx/README.md: clarify app-root and fix example hyperlink 2017-05-28 20:41:00 +01:00
Manuel Alejandro de Brito Fontes
efd6714d42 Merge pull request #774 from aledbf/fix-tcp-upd-listen 
Add IPv6 support in TCP and UDP stream section
 2017-05-28 13:11:05 -04:00
Lars Solberg
c12a2fa186 Correcting image version link 2017-05-27 21:04:40 +02:00
Manuel Alejandro de Brito Fontes
865cc78df3 Merge pull request #773 from aknuds1/fix-readme 
Fix README WRT. building nginx-ingress-controller
 2017-05-27 08:06:33 -04:00
Manuel de Brito Fontes
6563330d2b Release nginx ingress controller 0.9-beta.7 2017-05-26 15:10:07 -04:00
Manuel de Brito Fontes
20e99fa409 Update sniff parser to fix index out of bound error 2017-05-26 14:25:06 -04:00
Manuel de Brito Fontes
40cd78d0b8 Add support for IPv6 in TCP and UDP stream section 2017-05-26 12:19:54 -04:00
Arve Knudsen
c34b78b59c Fix README wrt. building nginx-ingress-controller 2017-05-26 16:20:21 +02:00
Matthew Walter
4ef6073f08 Typo fix ingres -> ingress 2017-05-25 23:13:40 -04:00
Nick Sardo
0018fa5b15 Merge pull request #763 from aledbf/release-beta-6 
Release nginx ingress controller 0.9-beta.6
 2017-05-24 18:02:29 -07:00
Manuel de Brito Fontes
178321b1fe Release nginx ingress controller 0.9-beta.6 2017-05-24 20:14:49 -04:00
Joao Morais
37f8c8bb40 Add ConfigureFlags() on controller interface 2017-05-24 21:03:52 -03:00
Manuel de Brito Fontes
30343c489a Fix bad variable assignment in template nginx 2017-05-24 00:25:42 -04:00
Manuel de Brito Fontes
4d7a280371 Fix server name hash maxSize default value 2017-05-23 20:13:32 -04:00
Manuel de Brito Fontes
07cdee5ca8 Refactoring whitelist source IP verification 2017-05-20 19:32:03 -04:00
Manuel de Brito Fontes
d742dcb55c Specify nginx image arch 2017-05-18 17:57:33 -04:00
Manuel de Brito Fontes
7ceb0a8025 Update nginx image 2017-05-17 14:54:27 -04:00
Manuel Alejandro de Brito Fontes
c831359733 Merge pull request #709 from phekmat/patch-1 
Add config for X-Forwarded-For trust
 2017-05-17 07:45:49 -04:00
Manuel Alejandro de Brito Fontes
49e490e5e5 Merge pull request #704 from ckeyer/fix_nginx_reload 
fix nginx reload flags '-c'
 2017-05-17 07:44:54 -04:00
Manuel Alejandro de Brito Fontes
b4032f0648 Merge pull request #722 from aledbf/remove-go-reaper 
Remove go-reap and use tini as process reaper
 2017-05-17 07:37:23 -04:00
Manuel Alejandro de Brito Fontes
bc6112bbef Merge pull request #724 from davidstack/master 
change the directory of default-backend.yaml
 2017-05-17 07:36:48 -04:00
Chuanjian Wang
9f32b74fea
fix nginx reload flags '-c' 2017-05-17 18:30:19 +08:00
Vlad Gorodetsky
3bd2cb331f Add keepalive_requests and client_boxy_buffer_size options 2017-05-17 09:36:10 +03:00
Damon Wang
7321704399 change the directory of default-backend.yaml 
there is no default-backend.yaml in examples directory.
 2017-05-17 11:12:43 +08:00
Manuel de Brito Fontes
22d63d0ad0 Auto stash before merge of "master" and "master/master" 
Remove go-reap and use tini as process reaper
 2017-05-16 16:06:33 -04:00
Kwok-kuen Cheung
a83f17c716 Set $proxy_upstream_name before location directive 
When nginx performs ssl redirect, $proxy_upstream_name used in log
is not initialized because it is set after nginx matched a location directive,
which is not the case when performing a ssl redirect.

refs #711
 2017-05-14 08:59:30 +08:00
Manuel Alejandro de Brito Fontes
12d2c4f689 Merge pull request #690 from aledbf/avoid-empty-secret 
Fix IP in logs for https traffic
 2017-05-12 10:44:20 -03:00
Payam Hekmat
dd894f0f73 Add config for X-Forwarded-For trust 
Use the same config option for `set_real_ip_from` when not using proxy protocol. The default remains `0.0.0.0/0`, which is insecure if the ingress is publicly accessible. This at least provides a workaround for #200
 2017-05-11 21:55:35 -05:00
Manuel de Brito Fontes
a537d2d0fa Remove secrets from ingress after a Delete event 2017-05-11 22:19:16 -03:00
Manuel de Brito Fontes
4bd4bf3be6 Fix remote address in log when protocol is https 2017-05-11 15:04:19 -03:00
Dan Cech
485098fd69 use nginx vts module version 0.1.14 2017-05-11 13:56:42 -04:00
David Pratt
d56d8b7da1 Use proxy-protocol to pass through source IP to nginx 2017-05-10 16:22:48 -05:00